CompTIA SY0-301 Online Practice Questions and Exam Preparation

CompTIA SY0-301 Online Questions & Answers

• Question 721:

  Which of the following would MOST likely belong in the DMZ? (Select TWO).

  A. Finance servers
  B. Backup servers
  C. Web servers
  D. SMTP gateways
  E. Laptops
  C. Web servers
  D. SMTP gateways

• Question 722:

  Key cards at a bank are not tied to individuals, but rather to organizational roles. After a break in, it becomes apparent that extra efforts must be taken to successfully pinpoint who exactly enters secure areas. Which of the following security measures can be put in place to mitigate the issue until a new key card system can be installed?

  A. Bollards
  B. Video surveillance
  C. Proximity readers
  D. Fencing
  B. Video surveillance

• Question 723:

  After a user performed a war driving attack, the network administrator noticed several similar markings where WiFi was available throughout the enterprise. Which of the following is the term used to describe these markings?

  A. IV attack
  B. War dialing
  C. Rogue access points
  D. War chalking
  D. War chalking

• Question 724:

  Encryption used by RADIUS is BEST described as:

  A. Quantum
  B. Elliptical curve
  C. Asymmetric
  D. Symmetric
  D. Symmetric

• Question 725:

  A company is looking to reduce the likelihood of employees in the finance department being involved with money laundering. Which of the following controls would BEST mitigate this risk?

  A. Implement privacy policies
  B. Enforce mandatory vacations
  C. Implement a security policy
  D. Enforce time of day restrictions
  B. Enforce mandatory vacations

• Question 726:

  Which of the following presents the STRONGEST access control?

  A. MAC
  B. TACACS
  C. DAC
  D. RBAC
  A. MAC

• Question 727:

  The IT department has setup a website with a series of questions to allow end users to reset their own accounts. Which of the following account management practices does this help?

  A. Account Disablements
  B. Password Expiration
  C. Password Complexity
  D. Password Recovery
  D. Password Recovery

• Question 728:

  Separation of duties is often implemented between developers and administrators in order to separate which of the following?

  A. More experienced employees from less experienced employees
  B. Changes to program code and the ability to deploy to production
  C. Upper level management users from standard development employees
  D. The network access layer from the application access layer
  B. Changes to program code and the ability to deploy to production

• Question 729:

  Joe analyzed the following log and determined the security team should implement which of the following as a mitigation method against further attempts?

  Host 192.168.1.123

  [00:00:01]Successful Login: 015 192.168.1.123 : local

  [00:00:03]Unsuccessful

  Login: 022 214.34.56.006 :RDP 192.168.1.124 [00:00:04]UnSuccessful Login: 010 214.34.56.006 :RDP 192.168.1.124 [00:00:07]UnSuccessful Login: 007 214.34.56.006 :RDP 192.168.1.124 [00:00:08]UnSuccessful Login: 003 214.34.56.006 :RDP 192.168.1.124

  A. Reporting
  B. IDS
  C. Monitor system logs
  D. Hardening
  D. Hardening

• Question 730:

  Several bins are located throughout a building for secure disposal of sensitive information. Which of the following does this prevent?

  A. Dumpster diving
  B. War driving
  C. Tailgating
  D. War chalking
  A. Dumpster diving